今日共收录 2436 条安全情报，包含 1258 个 CVE，779 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-50606
A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense.
CVE-2026-50605
A vulnerability has been identified in the Acer Agent Service component included with NitroSense and PredatorSense. Insu
CVE-2026-90982
@fastify/static is a Fastify plugin that serves static files from a configured root directory. In versions before 10.1.4
CVE-2026-87963
The Yo WordPress plugin from 1.1 through 1.3.1 does not sanitize or parameterize the username request parameter before u
CVE-2026-86801
The To Do List Member WordPress plugin from 1.4 through 1.6 ships a file upload endpoint that does not load WordPress an
CVE-2026-44940
The rancher-extension-stackstate extension in SUSE Observability exposes service tokens in plain configuration or insecu
CVE-2026-91016
The Motors WordPress plugin before 1.4.121 does not verify that a request is authorized to view a user's non-published
CVE-2026-91015
The Master Addons for Elementor WordPress plugin before 3.1.9 does not perform an authorization check on the AJAX actio
CVE-2026-91014
The Realtyna Organic IDX plugin + WPL Real Estate WordPress plugin before 5.4.2 does not sanitise and escape some of its
CVE-2026-91011
The EWWW Image Optimizer WordPress plugin before 8.7.7 does not properly escape image attribute values when it rewrites
CVE-2026-91010
The Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms WordPress plugin before 5.1.1 does not check the
CVE-2026-91009
The Active Woot Products Tables for WooCommerce. 100% FREE WordPress plugin before 2.1.3 does not have authorisation an
CVE-2026-91008
The Event Booking Manager for WooCommerce WordPress plugin before 5.3.8 does not perform an ownership or authorization
CVE-2026-90923
The Autopay WordPress plugin before 5.0.1 does not enforce the signature on one of its payment callbacks, allowing unaut
CVE-2026-90922
The Paid Membership Subscriptions WordPress plugin before 3.0.9 does not verify that the amount and currency reported b
CVE-2026-88904
The PuppyFW WordPress plugin through 0.4.4 does not have proper authorisation on one of its REST routes, which tests the
CVE-2026-88792
The Dictionary WordPress plugin through 1.0 does not have authorisation, sanitisation or escaping in place when adding o
CVE-2026-87836
The Comments Import & Export WordPress plugin before 2.5.4 does not restrict its comment export to users able to moderat
CVE-2026-87786
The Dewa Kirim WordPress plugin through 1.0.0 does not escape delivery coordinates submitted at checkout before outputt
CVE-2026-86824
The Newsletter WordPress plugin before 9.3.8 does not generate its email tracking signing key with sufficient entropy a